Prohomelab

1
services:
2
  nextcloud-aio-mastercontainer:
3
    image: nextcloud/all-in-one:latest
4
    init: true
5
    restart: always
6
    container_name: nextcloud-aio-mastercontainer # This line is not allowed to be changed as otherwise AIO will not work correctly
7
    volumes:
8
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config # This line is not allowed to be changed as otherwise the built-in backup solution will not work
9
      - /var/run/docker.sock:/var/run/docker.sock:ro # May be changed on macOS, Windows or docker rootless. See the applicable documentation. If adjusting, don't forget to also set 'WATCHTOWER_DOCKER_SOCKET_PATH'!
10
    #network_mode: bridge # add to the same network as docker run would do
11
    ports:
12
      #- 80:80 # Can be removed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
13
      - 8087:8080
14
      #- 8443:8443 # Can be removed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
15
    environment: # Is needed when using any of the options below
16
       AIO_DISABLE_BACKUP_SECTION: false # Setting this to true allows to hide the backup section in the AIO interface. See https://github.com/nextcloud/all-in-one#how-to-disable-the-backup-section
17
       APACHE_PORT: 11000 # Is needed when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else). See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
18
       APACHE_IP_BINDING: 0.0.0.0 # Should be set when running behind a web server or reverse proxy (like Apache, Nginx, Caddy, Cloudflare Tunnel and else) that is running on the same host. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
19
       BORG_RETENTION_POLICY: --keep-within=7d --keep-weekly=4 --keep-monthly=6 # Allows to adjust borgs retention policy. See https://github.com/nextcloud/all-in-one#how-to-adjust-borgs-retention-policy
20
      # COLLABORA_SECCOMP_DISABLED: false # Setting this to true allows to disable Collabora's Seccomp feature. See https://github.com/nextcloud/all-in-one#how-to-disable-collaboras-seccomp-feature
21
       NEXTCLOUD_DATADIR: /media/nextcloud # Allows to set the host directory for Nextcloud's datadir. ⚠️⚠️⚠️ Warning: do not set or adjust this value after the initial Nextcloud installation is done! See https://github.com/nextcloud/all-in-one#how-to-change-the-default-location-of-nextclouds-datadir
22
       NEXTCLOUD_MOUNT: /media # Allows the Nextcloud container to access the chosen directory on the host. See https://github.com/nextcloud/all-in-one#how-to-allow-the-nextcloud-container-to-access-directories-on-the-host
23
      # NEXTCLOUD_UPLOAD_LIMIT: 10G # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-upload-limit-for-nextcloud
24
      # NEXTCLOUD_MAX_TIME: 3600 # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-max-execution-time-for-nextcloud
25
      # NEXTCLOUD_MEMORY_LIMIT: 512M # Can be adjusted if you need more. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-php-memory-limit-for-nextcloud
26
      # NEXTCLOUD_TRUSTED_CACERTS_DIR: /path/to/my/cacerts # CA certificates in this directory will be trusted by the OS of the nexcloud container (Useful e.g. for LDAPS) See See https://github.com/nextcloud/all-in-one#how-to-trust-user-defined-certification-authorities-ca
27
      # NEXTCLOUD_STARTUP_APPS: deck twofactor_totp tasks calendar contacts notes # Allows to modify the Nextcloud apps that are installed on starting AIO the first time. See https://github.com/nextcloud/all-in-one#how-to-change-the-nextcloud-apps-that-are-installed-on-the-first-startup
28
       NEXTCLOUD_ADDITIONAL_APKS: imagemagick # This allows to add additional packages to the Nextcloud container permanently. Default is imagemagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-os-packages-permanently-to-the-nextcloud-container
29
       NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick # This allows to add additional php extensions to the Nextcloud container permanently. Default is imagick but can be overwritten by modifying this value. See https://github.com/nextcloud/all-in-one#how-to-add-php-extensions-permanently-to-the-nextcloud-container
30
      # NEXTCLOUD_ENABLE_DRI_DEVICE: true # This allows to enable the /dev/dri device in the Nextcloud container. ⚠️⚠️⚠️ Warning: this only works if the '/dev/dri' device is present on the host! If it should not exist on your host, don't set this to true as otherwise the Nextcloud container will fail to start! See https://github.com/nextcloud/all-in-one#how-to-enable-hardware-transcoding-for-nextcloud
31
      # NEXTCLOUD_KEEP_DISABLED_APPS: false # Setting this to true will keep Nextcloud apps that are disabled in the AIO interface and not uninstall them if they should be installed. See https://github.com/nextcloud/all-in-one#how-to-keep-disabled-apps
32
      # TALK_PORT: 3478 # This allows to adjust the port that the talk container is using. See https://github.com/nextcloud/all-in-one#how-to-adjust-the-talk-port
33
      # WATCHTOWER_DOCKER_SOCKET_PATH: /var/run/docker.sock # Needs to be specified if the docker socket on the host is not located in the default '/var/run/docker.sock'. Otherwise mastercontainer updates will fail. For macos it needs to be '/var/run/docker.sock'
34
    # security_opt: ["label:disable"] # Is needed when using SELinux
35
    networks:
36
      - nextcloud
37
  # # Optional: Caddy reverse proxy. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md
38
  # # You can find further examples here: https://github.com/nextcloud/all-in-one/discussions/588
39
  # caddy:
40
  #   image: caddy:alpine
41
  #   restart: always
42
  #   container_name: caddy
43
  #   volumes:
44
  #     - ./Caddyfile:/etc/caddy/Caddyfile
45
  #     - ./certs:/certs
46
  #     - ./config:/config
47
  #     - ./data:/data
48
  #     - ./sites:/srv
49
  #   network_mode: "host"
50

51
  go-vod:
52
    image: radialapps/go-vod
53
    restart: always
54
    depends_on:
55
      - nextcloud-aio-mastercontainer
56
    environment:
57
      - NEXTCLOUD_HOST=https://next.domain.ru
58
      - NVIDIA_VISIBLE_DEVICES=all
59
    volumes:
60
      - /media/nextcloud:/mnt/ncdata:ro
61
    runtime: nvidia
62
    networks:
63
      - nextcloud
64

65
volumes: # If you want to store the data on a different drive, see https://github.com/nextcloud/all-in-one#how-to-store-the-filesinstallation-on-a-separate-drive
66
  nextcloud_aio_mastercontainer:
67
    name: nextcloud_aio_mastercontainer # This line is not allowed to be changed as otherwise the built-in backup solution will not work
68

69
networks:
70
  nextcloud:
71
    name: nextcloud
72
    external: true

1
http:
2
  routers:
3
    nextcloud:
4
      entrypoints:
5
        - "https"
6
      rule: "Host(`subdomain.domain.ru`)"
7
      middlewares:
8
        - https-redirect
9
        - nextcloud-secure-headers
10
      tls:
11
        domains:
12
          - main: "subdomain.domain.ru"
13
      service: nextcloud
14
  services:
15
    nextcloud:
16
      loadBalancer:
17
        servers:
18
          - url: "http://your_vm_ip:11000"
19
        passHostHeader: true
20
  middlewares:
21
    crowdsec-bouncer: #if you use crowdsec
22
      forwardauth:
23
        address: http://bouncer-traefik:8080/api/v1/forwardAuth
24
        trustForwardHeader: true
25
        # https://github.com/goauthentik/authentik/issues/2366
26
    middlewares-authentik: # if you use authentik
27
      forwardAuth:
28
        address: "http://authentik_server:9000/outpost.goauthentik.io/auth/traefik"
29
        trustForwardHeader: true
30
        authResponseHeaders:
31
          - X-authentik-username
32
          - X-authentik-groups
33
          - X-authentik-email
34
          - X-authentik-name
35
          - X-authentik-uid
36
          - X-authentik-jwt
37
          - X-authentik-meta-jwks
38
          - X-authentik-meta-outpost
39
          - X-authentik-meta-provider
40
          - X-authentik-meta-app
41
          - X-authentik-meta-version
42

43
    nextcloud-secure-headers:
44
      headers:
45
        hostsProxyHeaders:
46
          - "X-Forwarded-Host"
47
        referrerPolicy: "same-origin"
48
        customResponseHeaders:
49
          X-Robots-Tag: "noindex, nofollow" #changed from default "none" parameter
50

51
    https-redirect:
52
      redirectScheme:
53
        scheme: https
54
        permanent: true
55

56
    nextcloud-chain:
57
      chain:
58
        middlewares:
59
          # - ... (e.g. rate limiting middleware)
60
          - https-redirect
61
          - nextcloud-secure-headers

1
docker compose up -d